Cisco 7100 Series Especificaciones descargar pdf (Pagina 49)

Intranet VPN Business Scenario 3-19

Configuring IPSec

Bridging software.

X.25 software, Version 3.0.0.

TN3270 Emulation software.

3 FastEthernet/IEEE 802.3 interface(s)

2 Serial network interface(s)

125K bytes of non-volatile configuration memory.

40960K bytes of ATA PCMCIA card at slot 0 (Sector size 512 bytes).

8192K bytes of Flash internal SIMM (Sector size 256K).

Configuration register is 0x0

Conﬁguring IPSec

After you have completed IKE conﬁguration, conﬁgure IPSec at each participating IPSec

peer. This section contains basic steps to conﬁgure IPSec and includes the following tasks:

1 Setting Global Lifetimes for IPSec Security Associations

2 Verifying Global Lifetimes for IPSec Security Associations

3 Creating Crypto Access Lists

4 Verifying Crypto Access Lists

5 Deﬁning Transform Sets

6 Verifying Transform Sets

Note IKE uses UDP port 500. The IPSec encapsulating security payload (ESP) and

authentication header (AH) protocols use IP protocol numbers 50 and 51. Ensure that your

accesslists are conﬁgured so that IP protocol50, 51, and UDP port 500 trafﬁcisnot blocked

at interfacesused by IPSec. In some cases,you mightneed toadd astatement to youraccess

lists to explicitly permit this trafﬁc.

1 2 ... 44 45 46 47 48 49 50 51 52 53 54 ... 111 112

Sin comentarios

Cisco 7100 Series Especificaciones Pagina 49